Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/gRkZSZlRCEjG_P5zo24hH234nI0.roa
File: gRkZSZlRCEjG_P5zo24hH234nI0.roa (raw, json)
Hash identifier: pshfeAIM0kV9e5vFPbTkA1/l3cnMpR7ISglqUB+Ik3E=
Subject key identifier: 81:19:19:49:99:51:08:48:C6:FC:FE:73:A3:6E:21:1F:6D:F8:9C:8D
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 018853C7850402C6252049C58A2A82BF31F2
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/gRkZSZlRCEjG_P5zo24hH234nI0.roa
Signing time: Thu 25 May 2023 16:39:24 +0000
ROA not before: Thu 25 May 2023 16:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 45.95.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Sep 2023 14:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:c7:85:04:02:c6:25:20:49:c5:8a:2a:82:bf:31:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: May 25 16:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8119194999510848c6fcfe73a36e211f6df89c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:70:b2:f6:a4:05:8e:67:f4:9c:1b:ab:a4:
aa:78:43:fb:47:c2:d6:88:ab:f8:b6:ea:31:8f:9d:
49:bd:d1:a4:bb:51:33:90:0b:99:85:44:f8:4d:71:
f1:b8:27:6f:78:14:83:c2:10:8f:30:26:c6:45:15:
2e:b0:c3:44:ef:62:de:1a:c0:9c:65:34:d4:22:b8:
4a:f4:82:ca:47:5a:6b:a4:41:17:96:39:8f:4e:51:
42:17:ba:7e:3c:46:4b:13:27:6d:ae:e5:35:1b:35:
c5:b5:6d:0c:c9:32:8d:72:b6:f4:47:db:66:9d:f5:
3c:40:63:ed:62:72:47:4d:77:e6:b2:f5:6e:69:aa:
64:20:d0:cf:11:c2:ec:1c:67:fd:57:e6:0f:e4:ee:
68:52:44:9e:7f:f3:db:00:76:1a:e6:f2:3b:3c:44:
0a:4b:29:92:8c:b0:8c:c2:df:c4:cb:97:54:6b:bb:
35:eb:10:8e:4f:c9:e0:48:91:81:27:49:ea:96:75:
e0:c6:6e:2f:48:c4:d1:be:27:3b:ba:6c:d9:10:02:
ca:44:41:8e:02:6b:e6:90:f3:5b:37:88:42:e3:a9:
26:40:86:5e:1f:90:26:16:96:45:47:46:01:db:a6:
68:42:b2:33:82:2c:da:f7:4c:57:10:c7:40:53:e2:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:19:19:49:99:51:08:48:C6:FC:FE:73:A3:6E:21:1F:6D:F8:9C:8D
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/gRkZSZlRCEjG_P5zo24hH234nI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:da:bb:d5:ba:c6:cf:ac:16:61:3b:e4:f2:c3:5c:f6:94:99:
5d:17:19:b4:a0:c3:69:e4:f9:a4:35:33:28:54:07:eb:12:93:
63:6a:d2:2d:6d:f8:6b:c9:ca:b8:6d:4a:1b:67:5c:05:76:35:
de:cf:c1:a2:f8:d7:81:31:5e:c4:91:f4:e4:a3:13:22:f8:c7:
61:2f:b8:65:c8:f6:6b:c1:18:d8:d8:83:65:26:17:ae:dc:21:
9d:45:32:5d:e7:02:cd:ad:a0:92:ee:85:dd:f4:87:10:50:f4:
6a:e7:ef:57:c7:23:ad:6e:d2:32:f7:db:66:19:af:f1:ec:52:
9f:f4:6b:d1:fb:dc:e7:e2:76:fc:63:cb:1c:42:e6:28:66:6d:
98:29:b7:72:67:eb:2d:8f:ed:06:dc:9e:51:a6:27:fb:ac:97:
9f:23:dd:d5:f3:5f:47:23:cb:6f:11:6f:41:2e:ad:08:57:82:
77:2d:13:d3:05:62:1b:7a:68:8e:07:f8:0e:82:4f:85:bd:fd:
9c:33:97:aa:01:d9:d9:33:90:6c:99:29:4d:b2:ee:82:2a:fe:
59:af:64:8f:9f:50:b1:79:c5:48:8a:0c:a6:fe:b8:4b:06:13:
2b:49:95:a7:63:7c:72:50:16:06:3a:92:dd:cd:56:74:ae:63:
50:bd:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org